Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32332d3233203d3e20323639303536.roa
File:                     34352e3137382e3230362e302f32332d3233203d3e20323639303536.roa (raw, json)
Hash identifier:          QeQVidprWl/aQQKeaZ8fKk2gdz5KYJ9FLkCFSF6ReUI=
Subject key identifier:   84:E2:F7:B4:A6:72:B9:28:BB:B2:B3:86:55:49:64:1A:65:A3:AF:E2
Certificate issuer:       /CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
Certificate serial:       18896937471293FE126C73C6AF7C1B3B12082283
Authority key identifier: 44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32332d3233203d3e20323639303536.roa
Signing time:             Thu 10 Nov 2022 18:40:22 +0000
ROA not before:           Thu 10 Nov 2022 18:35:22 +0000
ROA not after:            Thu 09 Nov 2023 18:40:22 +0000
asID:                     269056
IP address blocks:        45.178.206.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:89:69:37:47:12:93:fe:12:6c:73:c6:af:7c:1b:3b:12:08:22:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
        Validity
            Not Before: Nov 10 18:35:22 2022 GMT
            Not After : Nov  9 18:40:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:90:e4:1b:e7:90:c9:7d:6e:9e:30:6c:cc:
                    7f:19:ba:d6:16:ae:07:8b:49:bb:95:4f:c6:7c:c2:
                    68:82:6d:6a:14:0c:28:0a:80:54:55:fc:8c:bb:4d:
                    a5:d9:1a:ed:7a:85:3f:e1:6a:22:7a:c4:b5:9e:90:
                    cb:98:58:9f:73:f8:eb:bc:0f:dc:72:bf:ba:cc:59:
                    b3:7c:54:4a:d0:f8:12:a2:64:f5:67:57:09:9f:e4:
                    c3:ba:f5:a0:0a:6d:a5:71:d2:5c:e9:ca:8e:ae:61:
                    ae:76:b7:97:fc:f7:8b:32:33:34:bd:cf:05:6c:ba:
                    36:d3:09:db:bd:48:73:18:63:bb:41:cd:c4:e3:f0:
                    1a:76:3a:9f:db:21:39:18:b8:3c:17:46:72:4e:54:
                    a8:ad:84:b8:7a:98:7c:2e:09:7f:fb:50:63:79:34:
                    06:4b:bf:50:96:fc:30:e9:59:81:14:ab:62:4c:86:
                    c3:67:86:b1:c1:79:31:10:93:f6:c1:20:30:f0:45:
                    cf:21:81:ad:4f:42:5f:5e:fc:c5:8c:ef:32:41:da:
                    33:54:dc:88:8d:fc:4c:bc:06:36:42:a3:a5:f8:be:
                    c7:00:8a:eb:ce:a8:c7:56:d0:93:d4:ff:4f:33:6f:
                    d9:73:63:eb:9a:10:7f:8e:0e:db:ed:70:d2:89:51:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E2:F7:B4:A6:72:B9:28:BB:B2:B3:86:55:49:64:1A:65:A3:AF:E2
            X509v3 Authority Key Identifier:
                keyid:44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32332d3233203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:4d:b7:6e:9a:cd:e7:cf:09:c6:aa:3a:58:71:93:fc:f8:9b:
         e5:04:e0:e1:03:d4:c3:08:81:16:12:b7:f5:6a:40:a3:70:af:
         67:ed:4f:a2:54:89:d9:b0:d7:b5:00:be:9d:f1:03:72:17:24:
         ca:09:e3:a7:96:c1:59:b1:6e:8d:ec:9c:e2:12:47:0f:a6:6a:
         18:31:b8:02:6d:d8:8d:86:6c:0f:a8:9f:24:c0:b6:44:88:e7:
         f8:72:74:d5:54:30:81:d9:95:d4:ba:4f:90:32:53:0a:8b:42:
         86:25:3b:49:9d:81:80:3f:55:c7:35:68:22:24:0a:47:72:60:
         58:45:36:e8:62:13:33:98:e3:5a:39:f5:06:82:20:cc:0d:89:
         a4:d0:44:d2:e7:28:8c:11:ff:96:3d:56:5b:41:d5:d5:a4:e8:
         07:8f:40:81:ee:6f:56:ed:10:67:bf:3d:27:63:53:e2:59:9f:
         81:4b:b4:99:63:e0:fe:ed:15:ab:2b:6e:81:ad:14:57:41:58:
         cf:61:a4:7c:8a:b1:ec:c7:9e:38:3d:7c:85:d7:a3:6c:2a:c0:
         d7:a6:e1:77:17:83:06:bd:ba:ba:e0:91:7a:bb:9f:42:9a:48:
         ae:ab:0a:af:41:89:a4:e3:d6:ed:fc:36:ed:4b:6c:60:38:9e:
         2d:0a:e3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:07 2025 by rpki-client